Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

217 advisories

Loading
containerd: Unpack DoS via repeated opaque whiteouts Moderate
CVE-2026-95838 was published for github.com/containerd/containerd (Go) Oct 15, 2026
jake-ciolek Credited to jake-ciolek
OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm... Moderate Unreviewed
CVE-2026-110270 was published Oct 14, 2026
OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter... Moderate Unreviewed
CVE-2026-110260 was published Oct 14, 2026
OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to... Moderate Unreviewed
CVE-2026-110261 was published Oct 14, 2026
Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability High
CVE-2026-69651 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability High
CVE-2026-96958 was published for System.Security.Cryptography.Xml (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability High
CVE-2026-84008 was published for System.Security.Cryptography.Pkcs (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability Moderate
CVE-2026-70196 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows... Moderate Unreviewed
CVE-2026-109348 was published Oct 12, 2026
CairoSVG: Quadratic-time DoS parsing a crafted SVG <path> High
CVE-2026-107378 was published for cairosvg (pip) Oct 8, 2026
mohammedix88 Credited to mohammedix88
Pydantic AI: Excessive resource use when local web fetching converts nested HTML Moderate
CVE-2026-107287 was published for pydantic-ai (pip) Oct 8, 2026
SounLabs Credited to SounLabs
msgpack5: Quadratic parsing in the streaming decoder Moderate
CVE-2026-107297 was published for msgpack5 (npm) Oct 8, 2026
SWIFI-AI Credited to SWIFI-AI
Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch` Moderate
CVE-2026-107290 was published for pydantic-ai (pip) Oct 8, 2026
BrianWillows Credited to BrianWillows
Inefficient algorithmic complexity in the SPF macro expansion of Progressive Robot hMailServer 6... Moderate Unreviewed
CVE-2026-107575 was published Oct 8, 2026
Progressive Robot hMailServer 6.0.0 through 6.3.5 processes several IMAP commands from a signed... Moderate Unreviewed
CVE-2026-107581 was published Oct 8, 2026
Inefficient algorithmic complexity in the REST API (6.3.3 through 6.3.5) and the IMAP PREVIEW... Moderate Unreviewed
CVE-2026-107582 was published Oct 8, 2026
Inefficient algorithmic complexity in the decoding of message header fields in Progressive Robot... Moderate Unreviewed
CVE-2026-107580 was published Oct 8, 2026
Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive... Moderate Unreviewed
CVE-2026-107583 was published Oct 8, 2026
Inefficient algorithmic complexity in the bounce and complaint processing of Progressive Robot... High Unreviewed
CVE-2026-107579 was published Oct 8, 2026
Inefficient algorithmic complexity in the inbound DKIM and ARC signature verification of... High Unreviewed
CVE-2026-107576 was published Oct 8, 2026
Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a... High Unreviewed
CVE-2026-107574 was published Oct 8, 2026
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does... Moderate Unreviewed
CVE-2026-76271 was published Oct 7, 2026
An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. ... Moderate Unreviewed
CVE-2026-84429 was published Oct 6, 2026
smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line Moderate
GHSA-r4xh-jqrq-34v2 was published for smol-toml (npm) Oct 5, 2026
NotAFlightRisk Credited to NotAFlightRisk
PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion Moderate
CVE-2026-104844 was published for postcss-selector-parser (npm) Oct 5, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database